Skip to content

Commit

Permalink
Merge pull request #39 from google/update-to-v1.8.4
Browse files Browse the repository at this point in the history
Update to v1.8.4
  • Loading branch information
andrewpollock authored Aug 22, 2024
2 parents b756d11 + 6a315db commit 678a866
Show file tree
Hide file tree
Showing 6 changed files with 10 additions and 10 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/osv-scanner-reusable-pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ jobs:
- name: "Checkout target branch"
run: git checkout $GITHUB_BASE_REF
- name: "Run scanner on existing code"
uses: google/osv-scanner-action/osv-scanner-action@01ff5d1fb3f81ce02671051bcbef67347b5c6200 # v1.8.3
uses: google/osv-scanner-action/osv-scanner-action@fa6b69996424da9c1cebadc9bf67a02010433218 # v1.8.4
continue-on-error: true
with:
scan-args: |-
Expand All @@ -66,15 +66,15 @@ jobs:
- name: "Checkout current branch"
run: git checkout $GITHUB_SHA
- name: "Run scanner on new code"
uses: google/osv-scanner-action/osv-scanner-action@01ff5d1fb3f81ce02671051bcbef67347b5c6200 # v1.8.3
uses: google/osv-scanner-action/osv-scanner-action@fa6b69996424da9c1cebadc9bf67a02010433218 # v1.8.4
with:
scan-args: |-
--format=json
--output=new-results.json
${{ inputs.scan-args }}
continue-on-error: true
- name: "Run osv-scanner-reporter"
uses: google/osv-scanner-action/osv-reporter-action@01ff5d1fb3f81ce02671051bcbef67347b5c6200 # v1.8.3
uses: google/osv-scanner-action/osv-reporter-action@fa6b69996424da9c1cebadc9bf67a02010433218 # v1.8.4
with:
scan-args: |-
--output=${{ inputs.results-file-name }}
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/osv-scanner-reusable.yml
Original file line number Diff line number Diff line change
Expand Up @@ -64,15 +64,15 @@ jobs:
name: "${{ inputs.download-artifact }}"
path: "./"
- name: "Run scanner"
uses: google/osv-scanner-action/osv-scanner-action@01ff5d1fb3f81ce02671051bcbef67347b5c6200 # v1.8.3
uses: google/osv-scanner-action/osv-scanner-action@fa6b69996424da9c1cebadc9bf67a02010433218 # v1.8.4
with:
scan-args: |-
--output=results.json
--format=json
${{ inputs.scan-args }}
continue-on-error: true
- name: "Run osv-scanner-reporter"
uses: google/osv-scanner-action/osv-reporter-action@01ff5d1fb3f81ce02671051bcbef67347b5c6200 # v1.8.3
uses: google/osv-scanner-action/osv-reporter-action@fa6b69996424da9c1cebadc9bf67a02010433218 # v1.8.4
with:
scan-args: |-
--output=${{ inputs.results-file-name }}
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/osv-scanner-unified-workflow.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ permissions:
jobs:
scan-scheduled:
if: ${{ github.event_name == 'push' || github.event_name == 'schedule' }}
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@6bd271cb6a4c61522812ff2e7f7719cadf74f685" # v1.8.3
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@712a57b5f042cd42c534f88b387f93fcec14394a" # v1.8.4
with:
# Example of specifying custom arguments
scan-args: |-
Expand All @@ -44,7 +44,7 @@ jobs:
./
scan-pr:
if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@6bd271cb6a4c61522812ff2e7f7719cadf74f685" # v1.8.3
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@712a57b5f042cd42c534f88b387f93fcec14394a" # v1.8.4
with:
# Example of specifying custom arguments
scan-args: |-
Expand Down
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# OSV-Scanner CI/CD Action

[![Release v1.8.3](https://img.shields.io/badge/release-v1.8.3-blue?style=flat)](https://github.com/google/osv-scanner-action/releases)
[![Release v1.8.4](https://img.shields.io/badge/release-v1.8.4-blue?style=flat)](https://github.com/google/osv-scanner-action/releases)
<!-- Hard coded release version -->

The OSV-Scanner CI/CD action leverages the [OSV.dev](https://osv.dev/) database and the [OSV-Scanner](https://google.github.io/osv-scanner/) CLI tool to track and notify you of known vulnerabilities in your dependencies for over 11 [languages and ecosystems](https://google.github.io/osv-scanner/supported-languages-and-lockfiles/).
Expand Down
2 changes: 1 addition & 1 deletion osv-reporter-action/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ inputs:
required: true
runs:
using: "docker"
image: "docker://ghcr.io/google/osv-scanner-action:v1.8.3"
image: "docker://ghcr.io/google/osv-scanner-action:v1.8.4"
entrypoint: /root/osv-reporter
args:
- "${{ inputs.scan-args }}"
2 changes: 1 addition & 1 deletion osv-scanner-action/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,6 @@ inputs:
./
runs:
using: "docker"
image: "docker://ghcr.io/google/osv-scanner-action:v1.8.3"
image: "docker://ghcr.io/google/osv-scanner-action:v1.8.4"
args:
- ${{ inputs.scan-args }}

0 comments on commit 678a866

Please sign in to comment.